Mark as Brand Infringement/Impersonation/Leak Detected

"Mark as Brand Infringement/Impersonation/Leak Detected" confirms that a finding is real abuse: it infringes your brand, impersonates your organisation or its people, or leaks your data. It does not request a takedown; use "Request Takedown" for that. If you are not sure yet, use "Add to Watchlist" instead.

• Status: unchanged. The finding gets the "Brand Infringement Detected" mark.
• Score and severity: from the "Lookalike Domains", "Impersonating Social Media Accounts", and "Potential Employee Profiles" grids, or from those findings' detail pages, StyxView recalculates the finding's severity with the confirmation counted, which can raise it. At the next scoring run the finding counts under the confirmed indicator, such as "Lookalike Domain", rather than its unverified one, such as "Lookalike Domain (Unverified)". For other finding types, and from the Findings page or "Triage & Watchlist", only the mark and the comment change.
• Default views: unchanged.
• Where: Lookalike Domain, Account Impersonation, Potential Employee Profile, Rogue Mobile App, Unauthorized Job Posting, and Logo Match Detection findings, in their grids, on the Findings page, and on their detail pages.
• Who: every role in a grid; Admins and Analysts on a detail page.
• Undo: "Unmark as Brand Infringement/Impersonation/Leak Detected", which reverses the severity and indicator changes made from the same places.

Example: a social media account uses your logo and offers fake refunds. Mark it as brand infringement with "Copies our logo and asks customers for card details", then request a takedown.

Where finding actions live, and what holds for every one of them: Finding Actions.